Install

PhonePe Android Forensics runs from source. It needs Python 3.9 or newer, and Flask is its only runtime dependency.

$ git clone https://github.com/Mihir-Choudhary/Android-Phonepe-Forensics.git$ cd Android-Phonepe-Forensics$ pip install -r requirements.txt$ python run.py 127.0.0.1:8754

Open the address it prints, choose + New Case, point it at the extracted com.phonepe.app folder and select Process. Without an address, run.py starts on 127.0.0.1:5000. Set PP_FORENSICS_NOBROWSER=1 to stop it opening a browser tab automatically.

Note:

Everything runs locally and the tool makes no network requests. Binding to 127.0.0.1 keeps it off the network entirely.

Try it without evidence

The repository can build a synthetic acquisition, the one behind the screenshots: PhonePe’s real table shapes filled with invented rows (a subject named “Test Subject” and demo counterparties).

$ python notes/make_demo_acquisition.py /tmp/demo-case$ python run.py 127.0.0.1:8754

Then create a new case pointing at /tmp/demo-case/com.phonepe.app.

TODO (author):

The repository has no tagged releases or version number yet. Add the version and a download link here once one is published.